summaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
authorBrenton Leanhardt <bleanhar@redhat.com>2016-02-18 14:29:09 -0500
committerBrenton Leanhardt <bleanhar@redhat.com>2016-02-18 14:29:09 -0500
commit23902c7271dd39dc9d374f1c503e4eef621d3b2c (patch)
treea4db92d9c02a82070db08dbf0934451e1522c4b9 /roles
parent630bfbd5a1b7d8045fdaf1082d82eaa5b95bd316 (diff)
parentc9a2b9bf93d89916950938643bedbce841668cc2 (diff)
downloadopenshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.gz
openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.bz2
openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.xz
openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.zip
Merge pull request #1432 from sdodson/bz1302513
Don't make config files world readable
Diffstat (limited to 'roles')
-rw-r--r--roles/openshift_master/tasks/main.yml6
-rw-r--r--roles/openshift_node/tasks/main.yml3
2 files changed, 9 insertions, 0 deletions
diff --git a/roles/openshift_master/tasks/main.yml b/roles/openshift_master/tasks/main.yml
index 23dfacf79..dd66eeebb 100644
--- a/roles/openshift_master/tasks/main.yml
+++ b/roles/openshift_master/tasks/main.yml
@@ -221,6 +221,9 @@
template:
dest: "{{ openshift.master.session_secrets_file }}"
src: sessionSecretsFile.yaml.v1.j2
+ owner: root
+ group: root
+ mode: 0600
when: openshift.master.session_auth_secrets is defined and openshift.master.session_encryption_secrets is defined
notify:
- restart master
@@ -235,6 +238,9 @@
dest: "{{ openshift_master_config_file }}"
src: master.yaml.v1.j2
backup: true
+ owner: root
+ group: root
+ mode: 0600
notify:
- restart master
- restart master api
diff --git a/roles/openshift_node/tasks/main.yml b/roles/openshift_node/tasks/main.yml
index acf2f74e3..43253d72b 100644
--- a/roles/openshift_node/tasks/main.yml
+++ b/roles/openshift_node/tasks/main.yml
@@ -84,6 +84,9 @@
dest: "{{ openshift_node_config_file }}"
src: node.yaml.v1.j2
backup: true
+ owner: root
+ group: root
+ mode: 0600
notify:
- restart node